A PIN- and biometric-locked place for your most sensitive files. Mark a file Encrypted, or turn on zero-knowledge mode, and it is encrypted on your device with AES-256-GCM before it is stored, with a key DocFila's servers never receive. This page says exactly which files that covers.
Every vault file gets one of three protection levels when you add it. They are not the same.
Standard items are behind the vault's PIN and biometric lock and are stored in DocFila's cloud storage on Google Cloud, which encrypts them at rest. DocFila does not encrypt a Standard item on your device first.
Encrypted items are sealed on your device before upload, with a random key kept in the device's secure storage or a key derived from a password you set. DocFila's servers store only ciphertext and never receive the key. An Encrypted item therefore opens only on a device that holds its key, or where you type its password.
Offline-only items are never uploaded to DocFila's cloud. They stay on the device, and are encrypted there only when zero-knowledge mode is on.
With zero-knowledge mode on, new vault files are encrypted on your device with a master key created there and never sent to DocFila. DocFila cannot decrypt them. Keep the recovery phrase it shows you: DocFila cannot restore those files without the key.
Unlock with Face ID, Touch ID, a fingerprint, or your vault PIN. The vault locks itself after the period you choose in its settings, and when you leave it.
A vault item's title, description, category, tags, size, type and date are stored as ordinary records so the vault can list and search them. The full table of what DocFila encrypts, and what it does not, is on the Security page.
The vault is designed for documents that need confidentiality or personal privacy. Here are the most common use cases:
Store digital copies of your passport, driver's license, national ID, Social Security card, and birth certificate. Having copies in the vault means you can reach them quickly if the originals are lost or stolen. Mark them Encrypted if you want them encrypted on your device first.
Tax returns, bank statements, investment records, insurance policies, and mortgage documents contain sensitive financial information. The vault keeps them behind a lock that only you can open on your device.
Keep vaccination records, prescriptions, lab results, insurance cards, and medical histories behind the vault lock, encrypted on your device if you mark them Encrypted. Access them instantly at doctor's appointments or pharmacies without carrying physical copies.
Add files from your device, or move a document from your DocFila library into the vault. A scan, a signed contract or a finished resume can go in the same way.
Every vault item can be exported again at any time. Opening an Encrypted item decrypts it on your device for viewing; the stored copy stays encrypted. Sharing is always something you do on purpose.
| Feature | DocFila Vault | Google Drive | Dropbox | 1Password Docs |
|---|---|---|---|---|
| AES-256 encryption at rest | ✅ (Google Cloud) | ✅ (at rest) | ✅ (at rest) | ✅ |
| Encrypted on your device before upload | Encrypted items and zero-knowledge mode only | ❌ | ❌ | ✅ |
| Zero-Knowledge | Optional mode | ❌ | ❌ | ✅ |
| Biometric Unlock | ✅ | ✅ | ✅ | ✅ |
| Auto-Lock | ✅ | ❌ | ❌ | ✅ |
| Built-in Scanner | ✅ | ❌ | ❌ | ❌ |
| E-Signatures | ✅ | ❌ | Paid Add-on | ❌ |
| PDF Editor | ✅ | ❌ | ❌ | ❌ |
| Free Tier | ✅ | 15 GB | 2 GB | ❌ |
Keep going with the document workflow that matches this page. Open the tool you need, then finish the file in DocFila.